Computer/Internet Help Please!

[Hilarious Clinton 452]

That is so frustrating! I recently bought a new computer because my other one caught a virus!

Format the old hard drive and reinstall windows. Do you buy a new car instead of fixing it?

If the car is very old, on it's last legs and needs replacing, yes I do.

I get your point....

BTW get Webroot Spysweeper not Spybot. I mis-typed.

[Dan J 277]

I have a friend that was in the computer repair biz before. He has said, sometimes, buying a whole new machine can be cheaper than repairing one if it has been seriously contaminated. Even reformating a drive will not help. Of course, it highly depends on the value of the system!

That is so frustrating! I recently bought a new computer because my other one caught a virus!

Format the old hard drive and reinstall windows. Do you buy a new car instead of fixing it?

I cant imagine buying a new computer every time I got a virus !!!!

You just need a good anti-spyware programme, google spyware and it will give you a dozen good programmes that will solve your problem. I use spybot but there are many more out there.

All malware is software, and completely reformatting and reinstalling windows will take care of it. That itself doesnt take that long, but if you have alot of data to backup, or specific configurations that take awhile to set up, then it will take you awhile no matter if your reformatting an old computer or moving it to a new one.

[Kazan' Tiger 1]

No, not only does he not sell computers, he is cheap! It's like another poster said, if the computer is old (just like an old clunky car) it may just be less expensive to buy new.

I have a friend that was in the computer repair biz before. He has said, sometimes, buying a whole new machine can be cheaper than repairing one if it has been seriously contaminated. Even reformating a drive will not help. Of course, it highly depends on the value of the system!

You 'friend' must sell computers.

Get Spybot. It defends against spyware and viruses. Not free but cheaper than a new computer.

[reeses16 8]

Well, I'm back. I've been working on this all day! No luck yet. Adaware, spybot, and webroot have all failed me. I'm so frustrated. I tried looking at my internet settings...everything seemed fine. I also tried to update my windows, but it fails to do something or other and won't work. I will try to back everything up, and bring it to a professional.

If y'all thought of anything new, let me know. Thank you for all of the great suggestions. I really appreciate it!

-DA

[Marilyn. 340]

back up all your important files and reinstall your operating system.....

[PlatyPius 5]

I'd suggest a program called hijackthis. You need to have pretty good knowledge of Windows to use it, but I can walk you through it if you need, just PM me. It will get rid of stuff running on startup, BHO's, malicious services, and lots of other bad stuff. Not much it can't get rid of.

This is the correct motorcycle.

Download HiJack This, run it to generate a report, and then post it here, or send it in PM to me and JesseG. I'm sure between the two of us, we can tell you what is doing it.

If you see "MyWebSearch" or "MySearch" in your results, you already know what is causing your problem. Those are notorious for causing problems.

[Hilarious Clinton 452]

Being cheap can cost more in the long run. Lack of maintenance on a car (or computer) can send it to an early grave too. Does your cheap friend change his oil or save a few $$ and hope for the best? I have no spyware or viruses on my computer. It's worth $30 a year and a little of my time to achieve this. You need virus and spyware protection. Whether or not you get it is up to you. I'm just trying to help a brother out.

No, not only does he not sell computers, he is cheap! It's like another poster said, if the computer is old (just like an old clunky car) it may just be less expensive to buy new.

I have a friend that was in the computer repair biz before. He has said, sometimes, buying a whole new machine can be cheaper than repairing one if it has been seriously contaminated. Even reformating a drive will not help. Of course, it highly depends on the value of the system!

You 'friend' must sell computers.

Get Spybot. It defends against spyware and viruses. Not free but cheaper than a new computer.

[PlatyPius 5]

Being cheap can cost more in the long run. Lack of maintenance on a car (or computer) can send it to an early grave too. Does your cheap friend change his oil or save a few $ and hope for the best? I have no spyware or viruses on my computer. It's worth $30 a year and a little of my time to achieve this. You need virus and spyware protection. Whether or not you get it is up to you. I'm just trying to help a brother out.

No, not only does he not sell computers, he is cheap! It's like another poster said, if the computer is old (just like an old clunky car) it may just be less expensive to buy new.

I have a friend that was in the computer repair biz before. He has said, sometimes, buying a whole new machine can be cheaper than repairing one if it has been seriously contaminated. Even reformating a drive will not help. Of course, it highly depends on the value of the system!

You 'friend' must sell computers.

Get Spybot. It defends against spyware and viruses. Not free but cheaper than a new computer.

This is also the correct motorcycle.

I pay for a subscription to Panda anti-virus, and I haven't gotten anything since I installed it. I used to use the free version of AVG and it missed several things. Norton....well, Norton IS a virus. A system that has had Norton installed is a system that needs to be wiped and reformatted. McAfee is "ok"....that's about all I can say about it. Trend Micro is pretty good.

Panda offers a free web-based check of your system. It's worth trying.

Just for statistical purposes, here are the things that Panda has blocked on my system in the past month:

Viruses: 1

Spyware: 1,406,917

Phishing: 28

In addition to Panda, I also use Firefox as my primary browser, Opera as my secondary browser, and IE as my last choice. Really, I only use IE to test my web pages to make sure they render correctly using IE's ancient-####### HTML standards.

I also have Firefox set up to automatically delete form info, history, and such every time I close it.

As for advertising and "content search" (the annoying links with pop-up boxes that appear on some pages within the text), I use a "No-Script" plug-in for Firefox.

I haven't had an issue with viruses or spyware for about 2 years now.... I think I've found the winning combination.

[reeses16 8]

I will have to download it when I get home this evening. I'll send you and JesseG the report. Thanks!

This is the correct motorcycle.

Download HiJack This, run it to generate a report, and then post it here, or send it in PM to me and JesseG. I'm sure between the two of us, we can tell you what is doing it.

If you see "MyWebSearch" or "MySearch" in your results, you already know what is causing your problem. Those are notorious for causing problems.

[Ban Hammer 13,340]

i don't care too much for ad aware. it used to be good but now it seems blah.

i prefer webroot spysweeper and pestpatrol. both are paid subscription. pestpatrol has found and removed things that spysweeper didn't find.

[Marilyn. 340]

I just use AVG Free Edition and I have the Comodo Firewall... I also have Tune Up Utilities, which runs once a day....

I also run Spybot Search and Destroy when I remember to..

I don't seem to have any problems with viruses etc....

Edited January 2, 2008 by MarilynP

[reeses16 8]

Hello! Thanks for offering to help me out with my internet issues. I attached the log file.

Also, I called comcast about the issue today. I was really suspicious that it may be related to their service. I had them set up cable internet at my place on Thursday and started having this on Friday. Anyway, the had me uninstall my yahoo tool bars. and install the comcast tool bar. my searches work without any problems with the comcast tool bar.

On Yahoo, it worked temporarily. If you look near the search bar, above it there is a more section, I clicked it and saw that the there was a "disable search assistant" I clicked it, then my searches worked temporarily. When I restarted my laptop, the problems came back eventough the search assistant remained disabled.

On Google, I couldn't get it to work at all. Strangely, if I go to GoogleScholar (I use it a lot to find research papers) there are no problems. Just wanted to give a little extra info incase it mattered.

I'll post this on the tread with the results for those who might be curious.

Thanks!

-DA

***LOG***

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 4:09:36 PM, on 1/3/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\msdtc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\McAfee\Common Framework\FrameworkService.exe

C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe

C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\McAfee\Common Framework\naPrdMgr.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Vongo\VongoService.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\ehome\mcrdsvc.exe

C:\WINDOWS\system32\mqsvc.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\WINDOWS\system32\mqtgsvc.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\ehome\ehtray.exe

C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe

C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe

C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE

C:\Program Files\McAfee\Common Framework\UdaterUI.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\QuickTime\QTTask.exe

C:\Program Files\McAfee\Common Framework\McTray.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SpywareBot\SpywareBot.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\Program Files\Southwest Airlines\Ding\Ding.exe

C:\Program Files\Vongo\Tray.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\Program Files\Webroot\Spy Sweeper\SSU.EXE

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll

O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL

O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] "C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll

O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe

O4 - HKLM\..\Run: [synTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [QlbCtrl] "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start

O4 - HKLM\..\Run: [Cpqset] "C:\Program Files\HPQ\Default Settings\cpqset.exe"

O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [spywareBot] "C:\Program Files\SpywareBot\SpywareBot.exe" -boot

O4 - S-1-5-18 Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe (User 'SYSTEM')

O4 - S-1-5-18 Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'SYSTEM')

O4 - .DEFAULT Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe (User 'Default user')

O4 - .DEFAULT Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'Default user')

O4 - .DEFAULT User Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'Default user')

O4 - Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe

O4 - Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Pavilion Webcam Tray Icon.lnk = C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe

O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=pavilion&pf=laptop

O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab

O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab

O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{1BE95341-3215-4C21-B039-4CFD3A7E47FD}: NameServer = 85.255.113.148,85.255.112.185

O17 - HKLM\System\CCS\Services\Tcpip\..\{20C94F67-C61E-4B66-9703-1B5F5C35B408}: NameServer = 85.255.113.148,85.255.112.185

O17 - HKLM\System\CCS\Services\Tcpip\..\{7448E55F-643B-41FE-B157-46644B7AB9CF}: NameServer = 85.255.113.148,85.255.112.185

O17 - HKLM\System\CCS\Services\Tcpip\..\{83223231-5C75-42D2-99B9-7A7EC9ED7D40}: NameServer = 85.255.113.148,85.255.112.185

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.148 85.255.112.185

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.113.148 85.255.112.185

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.148 85.255.112.185

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe

O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe

O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Vongo Service - Starz Entertainment Group LLC - C:\Program Files\Vongo\VongoService.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

--

End of file - 13548 bytes

[reeses16 8]

Yikes! Didn't realize it was that long. I've been trying to read up on my problem. So far the site I like the best is http://www.pcstats.com/articleview.cfm?art...1579&page=5

I still don't know which files to delete, but it mentioned under "What to do:

If you recognize the URL at the end as your homepage or search engine, it's OK. If you don't, check it and have HijackThis fix it.

For the R3 items, always fix them unless it mentions a program you recognize, like Copernic"

FYI: my homepage is www.yahoo.com and I use the Yahoo search engine mainly, but also Google.

One last thing! My browser is IE7.

[PlatyPius 5]

Wow! That's a WHOLE lotta ####### you have on there. That poor HP is prolly wheezing.

Ok, here's where ya gotta start....

Delete Yahoo search/toolbar. That thing is a piece of #######, and is spyware.

You have both Norton (Symantec) and McAfee on your computer. What's up with that? Norton is evil. Did it come preinstalled on your PC? If so, it's gonna be a bear to remove. ie: if you reformat and reinstall using your recovery CD, it's gonna be right on there again.

So, here are the ones to check for "Fix":

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

(The one above checks to make sure that Yahoo is your default homepage. If it isn't, it gets rather pissed. Make it go away!)

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

There's a whole bunch of stuff that will be in the Registry, but that's a pretty advanced procedure, and the risk of screwing up Windows is high, so I recommend people fix the registry only if a) they know what they're doing, and 2) they're desperate.

Basically, avoid any and all search bars. They aren't doing it to help you out....they're offering them to you so they can track what you search for and where you go. ie: spyware.

And I just gotta say....I always thought Dell laptops were bad, but HP blows Dell away as far as the sheer amount of SH!T that is installed on there! That poor laptop has so much stuff on it, I'm surprised it boots up in less than 5 minutes!

Edited January 4, 2008 by PlatyPius

[Ban Hammer 13,340]

Wow! That's a WHOLE lotta ####### you have on there. That poor HP is prolly wheezing.

Ok, here's where ya gotta start....

Delete Yahoo search/toolbar. That thing is a piece of #######, and is spyware.

You have both Norton (Symantec) and McAfee on your computer. What's up with that? Norton is evil. Did it come preinstalled on your PC? If so, it's gonna be a bear to remove. ie: if you reformat and reinstall using your recovery CD, it's gonna be right on there again.

So, here are the ones to check for "Fix":

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

(The one above checks to make sure that Yahoo is your default homepage. If it isn't, it gets rather pissed. Make it go away!)

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

There's a whole bunch of stuff that will be in the Registry, but that's a pretty advanced procedure, and the risk of screwing up Windows is high, so I recommend people fix the registry only if a) they know what they're doing, and 2) they're desperate.

Basically, avoid any and all search bars. They aren't doing it to help you out....they're offering them to you so they can track what you search for and where you go. ie: spyware.

And I just gotta say....I always thought Dell laptops were bad, but HP blows Dell away as far as the sheer amount of SH!T that is installed on there! That poor laptop has so much stuff on it, I'm surprised it boots up in less than 5 minutes!

i thought i was seeing things too with the mcafee and norton.

some registry cleanup programs may be worth him trying.